CVE-2026-78363 | MW WP Form Plugin up to 5.1.4 on WordPress Shortcode injection

September 1, 2026 Yanac

A vulnerability, which was classified as critical, was found in MW WP Form Plugin up to 5.1.4 on WordPress. This impacts an unknown function of the component Shortcode Handler. The manipulation results in injection.

This vulnerability is known as CVE-2026-78363. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More